diff options
| -rw-r--r-- | core/linux-lts/PKGBUILD | 6 | ||||
| -rw-r--r-- | core/linux-lts/config | 13 |
2 files changed, 10 insertions, 9 deletions
diff --git a/core/linux-lts/PKGBUILD b/core/linux-lts/PKGBUILD index 757306c5..e37de31e 100644 --- a/core/linux-lts/PKGBUILD +++ b/core/linux-lts/PKGBUILD @@ -1,9 +1,9 @@ -# upstream git revision: 6970b1e2da530298180bbc7a4d0f4d3d4405ba23 +# upstream git revision: fc9eff7a79bdd314876a42504da9fa085fa3b7e1 # fail if upstream's .config changes for ((i=0; i<${#sha256sums[@]}; i++)); do - if [ "${sha256sums[${i}]}" = '64b6f91176b041572288d14c4e4fa8effd0f6119b34e8cdb2d7c6c824528af73' ]; then - sha256sums[${i}]='b7b0cbc5eac90c6841e5767a5dd662682a65a05f4e758d3ea567502a53ea3890' + if [ "${sha256sums[${i}]}" = 'be2066dd6133357007e8c7da9d5de3194b13409ebbfba8821db1849588fced1e' ]; then + sha256sums[${i}]='1b19b01b8687a6438157cf23fcc5ac2d002735d475cbd6adc4b8a27447582cd5' fi done diff --git a/core/linux-lts/config b/core/linux-lts/config index 9435003a..a053fee1 100644 --- a/core/linux-lts/config +++ b/core/linux-lts/config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.4.93 Kernel Configuration +# Linux/x86 5.4.95 Kernel Configuration # # @@ -2959,7 +2959,7 @@ CONFIG_B53_SRAB_DRIVER=m CONFIG_B53_SERDES=m CONFIG_NET_DSA_BCM_SF2=m CONFIG_NET_DSA_LOOP=m -CONFIG_NET_DSA_LANTIQ_GSWIP=m +# CONFIG_NET_DSA_LANTIQ_GSWIP is not set CONFIG_NET_DSA_MT7530=m CONFIG_NET_DSA_MV88E6060=m CONFIG_NET_DSA_MICROCHIP_KSZ_COMMON=m @@ -3364,7 +3364,7 @@ CONFIG_NXP_TJA11XX_PHY=m CONFIG_QSEMI_PHY=m CONFIG_REALTEK_PHY=m CONFIG_RENESAS_PHY=m -CONFIG_ROCKCHIP_PHY=m +# CONFIG_ROCKCHIP_PHY is not set CONFIG_SMSC_PHY=m CONFIG_STE10XP=m CONFIG_TERANETICS_PHY=m @@ -4450,7 +4450,7 @@ CONFIG_SPI_FSL_SPI=m CONFIG_SPI_OC_TINY=m CONFIG_SPI_PXA2XX=m CONFIG_SPI_PXA2XX_PCI=m -CONFIG_SPI_ROCKCHIP=m +# CONFIG_SPI_ROCKCHIP is not set CONFIG_SPI_SC18IS602=m CONFIG_SPI_SIFIVE=m CONFIG_SPI_MXIC=m @@ -9910,7 +9910,8 @@ CONFIG_SECURITY_APPARMOR=y CONFIG_SECURITY_APPARMOR_HASH=y CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y # CONFIG_SECURITY_APPARMOR_DEBUG is not set -# CONFIG_SECURITY_LOADPIN is not set +CONFIG_SECURITY_LOADPIN=y +CONFIG_SECURITY_LOADPIN_ENFORCE=y CONFIG_SECURITY_YAMA=y CONFIG_SECURITY_SAFESETID=y CONFIG_SECURITY_LOCKDOWN_LSM=y @@ -9924,7 +9925,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama" +CONFIG_LSM="lockdown,yama,bpf" # # Kernel hardening options |